# CVE-2025-47907: Incorrect results returned from Rows.Scan in database/sql

CVE-2025-47907 is fixed in 22 products on 1 platform, first by RHSA-2025:20983, released August 7, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2025-47907
- Priority: High
- CVSS: 7.0 (moderate)
- EPSS: 0.0044
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Aug 7, 2025
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47907

## Description

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | azure-storage-azcopy sles 15.6 | 10.32.4-150400.9.11.1 | [SUSE-SU-2026:2466-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2466-1.md) | Jun 19, 2026 |
| Linux | azure-storage-azcopy sles 15.7 | 10.32.4-150400.9.11.1 | [SUSE-SU-2026:2466-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2466-1.md) | Jun 19, 2026 |
| Linux | go-toolset RHEL 9 | 0:1.24.6-1.el9_6 | [RHSA-2025:13935](https://patchblox.com/security/data/fix/linux/rhsa-2025-13935.md) | Aug 18, 2025 |
| Linux | go1.23 opensuse-leap 15.6 | 1.23.12-150000.1.40.1 | [SUSE-SU-2025:02759-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02759-1.md) | Aug 12, 2025 |
| Linux | go1.23 sles 15.6 | 1.23.12-150000.1.40.1 | [SUSE-SU-2025:02759-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02759-1.md) | Aug 12, 2025 |
| Linux | go1.23 sles 15.7 | 1.23.12-150000.1.40.1 | [SUSE-SU-2025:02759-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02759-1.md) | Aug 12, 2025 |
| Linux | go1.23-openssl opensuse-leap 15.6 | 1.23.12-150600.13.9.1 | [SUSE-SU-2025:03159-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03159-1.md) | Sep 11, 2025 |
| Linux | go1.23-openssl sles 15.6 | 1.23.12-150600.13.9.1 | [SUSE-SU-2025:03159-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03159-1.md) | Sep 11, 2025 |
| Linux | go1.23-openssl sles 15.7 | 1.23.12-150600.13.9.1 | [SUSE-SU-2025:03159-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03159-1.md) | Sep 11, 2025 |
| Linux | go1.24 opensuse-leap 15.6 | 1.24.6-150000.1.32.1 | [SUSE-SU-2025:02760-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02760-1.md) | Aug 12, 2025 |
| Linux | go1.24 sles 15.6 | 1.24.6-150000.1.32.1 | [SUSE-SU-2025:02760-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02760-1.md) | Aug 12, 2025 |
| Linux | go1.24 sles 15.7 | 1.24.6-150000.1.32.1 | [SUSE-SU-2025:02760-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02760-1.md) | Aug 12, 2025 |
| Linux | go1.24-openssl opensuse-leap 15.6 | 1.24.6-150600.13.9.1 | [SUSE-SU-2025:03158-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03158-1.md) | Sep 11, 2025 |
| Linux | go1.24-openssl sles 15.6 | 1.24.6-150600.13.9.1 | [SUSE-SU-2025:03158-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03158-1.md) | Sep 11, 2025 |
| Linux | go1.24-openssl sles 15.7 | 1.24.6-150600.13.9.1 | [SUSE-SU-2025:03158-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03158-1.md) | Sep 11, 2025 |
| Linux | go1.25 opensuse-leap 15.6 | 1.25.0-150000.1.5.1 | [SUSE-SU-2025:02924-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02924-1.md) | Aug 20, 2025 |
| Linux | go1.25 sles 15.6 | 1.25.0-150000.1.5.1 | [SUSE-SU-2025:02924-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02924-1.md) | Aug 20, 2025 |
| Linux | go1.25 sles 15.7 | 1.25.0-150000.1.5.1 | [SUSE-SU-2025:02924-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02924-1.md) | Aug 20, 2025 |
| Linux | go1.25-openssl opensuse-leap 15.6 | 1.25.6-150600.13.9.1 | [SUSE-SU-2026:0298-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0298-1.md) | Jan 26, 2026 |
| Linux | go1.25-openssl sles 15.6 | 1.25.6-150600.13.9.1 | [SUSE-SU-2026:0298-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0298-1.md) | Jan 26, 2026 |
| Linux | go1.25-openssl sles 15.7 | 1.25.6-150600.13.9.1 | [SUSE-SU-2026:0298-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0298-1.md) | Jan 26, 2026 |
| Linux | golang RHEL 10 | 1.24.6-1.el10_0 | [RHSA-2025:13941](https://patchblox.com/security/data/fix/linux/rhsa-2025-13941.md) | Sep 18, 2025 |
| Linux | golang RHEL 9 | 0:1.24.6-1.el9_6 | [RHSA-2025:13935](https://patchblox.com/security/data/fix/linux/rhsa-2025-13935.md) | Aug 18, 2025 |
| Linux | golang amzn 2023 | 1.24.6-1.amzn2023.0.1 | [ALAS2023-2025-1161](https://patchblox.com/security/data/fix/linux/alas2023-2025-1161.md) | Aug 22, 2025 |
| Linux | golang-bin RHEL 9 | 0:1.24.6-1.el9_6 | [RHSA-2025:13935](https://patchblox.com/security/data/fix/linux/rhsa-2025-13935.md) | Aug 18, 2025 |
| Linux | golang-bin amzn 2023 | 1.24.6-1.amzn2023.0.1 | [ALAS2023-2025-1161](https://patchblox.com/security/data/fix/linux/alas2023-2025-1161.md) | Aug 22, 2025 |
| Linux | golang-docs RHEL 9 | 0:1.24.6-1.el9_6 | [RHSA-2025:13935](https://patchblox.com/security/data/fix/linux/rhsa-2025-13935.md) | Aug 18, 2025 |
| Linux | golang-docs almalinux 10 | 1.24.6-1.el10_0.alma.1 | [ALSA-2025:13941](https://patchblox.com/security/data/fix/linux/alsa-2025-13941.md) | Aug 18, 2025 |
| Linux | golang-docs amzn 2023 | 1.24.6-1.amzn2023.0.1 | [ALAS2023-2025-1161](https://patchblox.com/security/data/fix/linux/alas2023-2025-1161.md) | Aug 22, 2025 |
| Linux | golang-misc RHEL 9 | 0:1.24.6-1.el9_6 | [RHSA-2025:13935](https://patchblox.com/security/data/fix/linux/rhsa-2025-13935.md) | Aug 18, 2025 |
| Linux | golang-misc almalinux 10 | 1.24.6-1.el10_0.alma.1 | [ALSA-2025:13941](https://patchblox.com/security/data/fix/linux/alsa-2025-13941.md) | Aug 18, 2025 |
| Linux | golang-misc amzn 2023 | 1.24.6-1.amzn2023.0.1 | [ALAS2023-2025-1161](https://patchblox.com/security/data/fix/linux/alas2023-2025-1161.md) | Aug 22, 2025 |
| Linux | golang-race RHEL 9 | 0:1.24.6-1.el9_6 | [RHSA-2025:13935](https://patchblox.com/security/data/fix/linux/rhsa-2025-13935.md) | Aug 18, 2025 |
| Linux | golang-shared amzn 2023 | 1.24.6-1.amzn2023.0.1 | [ALAS2023-2025-1161](https://patchblox.com/security/data/fix/linux/alas2023-2025-1161.md) | Aug 22, 2025 |
| Linux | golang-src RHEL 9 | 0:1.24.6-1.el9_6 | [RHSA-2025:13935](https://patchblox.com/security/data/fix/linux/rhsa-2025-13935.md) | Aug 18, 2025 |
| Linux | golang-src almalinux 10 | 1.24.6-1.el10_0.alma.1 | [ALSA-2025:13941](https://patchblox.com/security/data/fix/linux/alsa-2025-13941.md) | Aug 18, 2025 |
| Linux | golang-src amzn 2023 | 1.24.6-1.amzn2023.0.1 | [ALAS2023-2025-1161](https://patchblox.com/security/data/fix/linux/alas2023-2025-1161.md) | Aug 22, 2025 |
| Linux | golang-tests RHEL 9 | 0:1.24.6-1.el9_6 | [RHSA-2025:13935](https://patchblox.com/security/data/fix/linux/rhsa-2025-13935.md) | Aug 18, 2025 |
| Linux | golang-tests almalinux 10 | 1.24.6-1.el10_0.alma.1 | [ALSA-2025:13941](https://patchblox.com/security/data/fix/linux/alsa-2025-13941.md) | Aug 18, 2025 |
| Linux | golang-tests amzn 2023 | 1.24.6-1.amzn2023.0.1 | [ALAS2023-2025-1161](https://patchblox.com/security/data/fix/linux/alas2023-2025-1161.md) | Aug 22, 2025 |
| Linux | govulncheck-vulndb opensuse-leap 15.6 | 0.0.20250814T182633-150000.1.98.1 | [SUSE-SU-2025:02912-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02912-1.md) | Aug 19, 2025 |
| Linux | govulncheck-vulndb sles 15.6 | 0.0.20250814T182633-150000.1.98.1 | [SUSE-SU-2025:02912-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02912-1.md) | Aug 19, 2025 |
| Linux | podman RHEL 10 | 5.6.0-5.el10_1 | [RHSA-2025:20983](https://patchblox.com/security/data/fix/linux/rhsa-2025-20983.md) | Aug 7, 2025 |
| Linux | podman RHEL 9 | 6:5.6.0-6.el9_7 | [RHSA-2025:20909](https://patchblox.com/security/data/fix/linux/rhsa-2025-20909.md) | Nov 11, 2025 |
| Linux | podman almalinux 10 | 7:5.6.0-5.el10_1 | [ALSA-2025:20983](https://patchblox.com/security/data/fix/linux/alsa-2025-20983.md) | Nov 11, 2025 |
| Linux | podman almalinux 9 | 6:5.6.0-6.el9_7 | [ALSA-2025:20909](https://patchblox.com/security/data/fix/linux/alsa-2025-20909.md) | Nov 11, 2025 |
| Linux | podman ol 10 | 7:5.6.0-6.0.1.el10_1 | [ELSA-2025-20983](https://patchblox.com/security/data/fix/linux/elsa-2025-20983.md) | Dec 3, 2025 |
| Linux | podman ol 9 | 6:5.6.0-6.0.1.el9_7 | [ELSA-2025-20909](https://patchblox.com/security/data/fix/linux/elsa-2025-20909.md) | Nov 25, 2025 |
| Linux | podman-docker RHEL 9 | 6:5.6.0-6.el9_7 | [RHSA-2025:20909](https://patchblox.com/security/data/fix/linux/rhsa-2025-20909.md) | Nov 11, 2025 |
| Linux | podman-docker almalinux 10 | 7:5.6.0-5.el10_1 | [ALSA-2025:20983](https://patchblox.com/security/data/fix/linux/alsa-2025-20983.md) | Nov 11, 2025 |
| Linux | podman-docker almalinux 9 | 6:5.6.0-6.el9_7 | [ALSA-2025:20909](https://patchblox.com/security/data/fix/linux/alsa-2025-20909.md) | Nov 11, 2025 |
| Linux | podman-docker ol 10 | 7:5.6.0-6.0.1.el10_1 | [ELSA-2025-20983](https://patchblox.com/security/data/fix/linux/elsa-2025-20983.md) | Dec 3, 2025 |
| Linux | podman-docker ol 9 | 6:5.6.0-6.0.1.el9_7 | [ELSA-2025-20909](https://patchblox.com/security/data/fix/linux/elsa-2025-20909.md) | Nov 25, 2025 |
| Linux | podman-plugins RHEL 9 | 6:5.6.0-6.el9_7 | [RHSA-2025:20909](https://patchblox.com/security/data/fix/linux/rhsa-2025-20909.md) | Nov 11, 2025 |
| Linux | podman-plugins almalinux 9 | 6:5.6.0-6.el9_7 | [ALSA-2025:20909](https://patchblox.com/security/data/fix/linux/alsa-2025-20909.md) | Nov 11, 2025 |
| Linux | podman-plugins ol 9 | 6:5.6.0-6.0.1.el9_7 | [ELSA-2025-20909](https://patchblox.com/security/data/fix/linux/elsa-2025-20909.md) | Nov 25, 2025 |
| Linux | podman-remote RHEL 9 | 6:5.6.0-6.el9_7 | [RHSA-2025:20909](https://patchblox.com/security/data/fix/linux/rhsa-2025-20909.md) | Nov 11, 2025 |
| Linux | podman-remote almalinux 10 | 7:5.6.0-5.el10_1 | [ALSA-2025:20983](https://patchblox.com/security/data/fix/linux/alsa-2025-20983.md) | Nov 11, 2025 |
| Linux | podman-remote almalinux 9 | 6:5.6.0-6.el9_7 | [ALSA-2025:20909](https://patchblox.com/security/data/fix/linux/alsa-2025-20909.md) | Nov 11, 2025 |
| Linux | podman-remote ol 10 | 7:5.6.0-6.0.1.el10_1 | [ELSA-2025-20983](https://patchblox.com/security/data/fix/linux/elsa-2025-20983.md) | Dec 3, 2025 |
| Linux | podman-remote ol 9 | 6:5.6.0-6.0.1.el9_7 | [ELSA-2025-20909](https://patchblox.com/security/data/fix/linux/elsa-2025-20909.md) | Nov 25, 2025 |
| Linux | podman-tests RHEL 9 | 6:5.6.0-6.el9_7 | [RHSA-2025:20909](https://patchblox.com/security/data/fix/linux/rhsa-2025-20909.md) | Nov 11, 2025 |
| Linux | podman-tests almalinux 10 | 7:5.6.0-5.el10_1 | [ALSA-2025:20983](https://patchblox.com/security/data/fix/linux/alsa-2025-20983.md) | Nov 11, 2025 |
| Linux | podman-tests almalinux 9 | 6:5.6.0-6.el9_7 | [ALSA-2025:20909](https://patchblox.com/security/data/fix/linux/alsa-2025-20909.md) | Nov 11, 2025 |
| Linux | podman-tests ol 10 | 7:5.6.0-6.0.1.el10_1 | [ELSA-2025-20983](https://patchblox.com/security/data/fix/linux/elsa-2025-20983.md) | Dec 3, 2025 |
| Linux | podman-tests ol 9 | 6:5.6.0-6.0.1.el9_7 | [ELSA-2025-20909](https://patchblox.com/security/data/fix/linux/elsa-2025-20909.md) | Nov 25, 2025 |

---

Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.